CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 09/09/2026 |
| CVE-2026-21083 | MEDIO6.5 | Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data. | 10/08/2026 |
| CVE-2026-21082 | MEDIO5.5 | Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information. | 10/08/2026 |
| CVE-2026-21080 | MEDIO6.5 | Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data. | 10/08/2026 |
| CVE-2026-21079 | MEDIO6.5 | Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data. | 10/08/2026 |
| CVE-2026-21078 | MEDIO6.5 | Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity. | 10/08/2026 |
| CVE-2026-21077 | MEDIO5.5 | Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information. | 10/08/2026 |
| CVE-2026-21076 | MEDIO5.5 | Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information. | 10/08/2026 |
| CVE-2026-21038 | MEDIO5.5 | Improper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5.0 allows local attacker to access out-of-bounds memory. | 05/06/2026 |
| CVE-2026-21037 | ALTO7.1 | Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary activity with Samsung Members privilege. | 05/06/2026 |
| CVE-2026-21036 | MEDIO5.5 | Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information. | 05/06/2026 |
| CVE-2026-21035 | ALTO7.5 | Improper input validation in Samsung Plus TV prior to version 1.0.28.6 allows remote attackers to access sensitive information. | 05/06/2026 |
| CVE-2026-21034 | BASSO3.3 | Improper export of android application components in Samsung Auto prior to version 3.1.2.61 in Android 15 and 3.2.0.38 in Android 16 allows local attacker to change audio configuration. | 05/06/2026 |
| CVE-2026-21033 | ALTO7.1 | Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script. | 05/06/2026 |
| CVE-2026-21032 | ALTO7.1 | Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script. | 05/06/2026 |
| CVE-2026-8915 | ALTO8.8 | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.
This issue affects Escargot: 36f5fb58366a67b713c02f6fd985e924fcc09e31. | 28/05/2026 |
| CVE-2026-47317 | ALTO7.5 | Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3. | 19/05/2026 |